Behavioral task
behavioral1
Sample
8126bd2adf2da32f33379127f89ea35c337300f9be1087bf3ff375618fdaefb2.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8126bd2adf2da32f33379127f89ea35c337300f9be1087bf3ff375618fdaefb2.exe
Resource
win10v2004-20240709-en
General
-
Target
8126bd2adf2da32f33379127f89ea35c337300f9be1087bf3ff375618fdaefb2
-
Size
8.2MB
-
MD5
c1da33dbdbdf3f0a33b1a8719e13901e
-
SHA1
3ff3e93e953b4c0debacb8b2bf52f252033e7578
-
SHA256
8126bd2adf2da32f33379127f89ea35c337300f9be1087bf3ff375618fdaefb2
-
SHA512
ac7b25d1aee6f6479072d32aad64f9431c6416ba00a8d0ed80b45700a73373f6a777e2b68dfaab3f00743b7671b5d183aac47ec5d4046ca97cc034ec9a362933
-
SSDEEP
196608:lvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvvx:n
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8126bd2adf2da32f33379127f89ea35c337300f9be1087bf3ff375618fdaefb2
Files
-
8126bd2adf2da32f33379127f89ea35c337300f9be1087bf3ff375618fdaefb2.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: 80KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE